Medium 6.1
2026-05-01< 2.25.19
CVE-2024-13362
Minimum safe version
2.25.19
Update to 2.25.19 or later to address 6 fixable vulnerabilities
CVE-2024-13362
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Bulk Edit Posts and Products in Spreadsheet Plugin < 2.25.4 is vulnerable to Cross Site Scripting (XSS)
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Bulk Edit Posts and Products in Spreadsheet plugin < 2.24.13 - Sensitive Information Disclosure vulnerability
WordPress Bulk Edit Posts and Products in Spreadsheet plugin < 2.24.13 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability